apiVersion: v1
kind: ConfigMap
metadata:
  name: teamclaw-config
  labels: {{- include "teamclaw.labels" . | nindent 4 }}
data:
  teamclaw.toml: |
    deploy_target = "cloud"
    listen_addr = "0.0.0.0:8080"

    [database]
    # Overlaid by TEAMCLAW_DATABASE__URL from the Secret.
    url = "postgres://overridden-by-env"

    [llm]
    provider = "{{ .Values.llm.provider }}"
    model = "{{ .Values.llm.model }}"
    {{- if .Values.llm.baseUrl }}
    base_url = "{{ .Values.llm.baseUrl }}"
    {{- end }}

    [auth]
    mode = "{{ .Values.auth.mode }}"
    {{- if eq .Values.auth.mode "oidc" }}
    issuer_url = "{{ required "auth.issuerUrl is required for oidc" .Values.auth.issuerUrl }}"
    client_id = "{{ .Values.auth.clientId }}"
    {{- end }}

    [storage]
    data_dir = "{{ .Values.storage.dataDir }}"
    backend = "{{ .Values.storage.backend }}"
    {{- if eq .Values.storage.backend "s3" }}
    s3_endpoint = "{{ required "storage.s3.endpoint required" .Values.storage.s3.endpoint }}"
    s3_bucket = "{{ required "storage.s3.bucket required" .Values.storage.s3.bucket }}"
    {{- end }}

    [broker]
    socket_path = "/run/teamclaw/broker.sock"

    {{- if .Values.oauth.issuerUrl }}

    [oauth]
    issuer_url = "{{ .Values.oauth.issuerUrl }}"
    client_id = "{{ .Values.oauth.clientId }}"
    redirect_base = "{{ .Values.oauth.redirectBase }}"
    {{- end }}